Re: [PATCH 15/18] crypto: actually stash session keys when try-decrypt=true

2017-12-01 Thread David Bremner
Daniel Kahn Gillmor writes: > On Thu 2017-11-16 08:53:14 -0400, David Bremner wrote: >> I'd be happier if we didn't further entrench the text format in the test >> suite. How hard would it be to use json output (+maybe python?) here? > > json output seems clunkier to me, and i don't think it's n

Re: [PATCH 15/18] crypto: actually stash session keys when try-decrypt=true

2017-11-30 Thread Daniel Kahn Gillmor
On Thu 2017-11-16 08:53:14 -0400, David Bremner wrote: > I'd be happier if we didn't further entrench the text format in the test > suite. How hard would it be to use json output (+maybe python?) here? json output seems clunkier to me, and i don't think it's necessary for the purposes of these te

Re: [PATCH 15/18] crypto: actually stash session keys when try-decrypt=true

2017-11-16 Thread David Bremner
Daniel Kahn Gillmor writes: > +Be aware that the index is likely sufficient to reconstruct > +the cleartext of the message itself, so please ensure that the > +notmuch message index is adequately protected. DO NOT USE > +``--try-decrypt=true`` without considering

[PATCH 15/18] crypto: actually stash session keys when try-decrypt=true

2017-10-24 Thread Daniel Kahn Gillmor
If you're going to store the cleartext index of an encrypted message, in most situations you might just as well store the session key. Doing this storage has efficiency and recoverability advantages. Combined with a schedule of regular OpenPGP subkey rotation and destruction, this can also offer s